Now Hacked
EN-GB
Data breach

Around 227,000 customer email addresses leaked at Sumitomo Mitsui Banking Corporation

First reported · Last reported · 12 related reports

SpilloverSpillover from the Arara incident · View original incident →

Around 227,000 email addresses belonging to Sumitomo Mitsui Banking Corporation customers were leaked following unauthorised access to arara, its outsourced email delivery provider. No leak of account numbers or passwords has been confirmed.

Key facts

Affected organisation
Sumitomo Mitsui Banking Corporation
Original incident
Arara email service cyber-attack exposes 81.33 million email addresses
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
Around 227,000 customer email addresses
Cause / method
Unauthorised access to outsourced email delivery provider arara
Location
Japan

If your data was exposed

Exposed dataEmail

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.

Timeline

  1. It emerged that around 227,000 email addresses belonging to Sumitomo Mitsui Banking Corporation customers had been leaked in the arara breach.
  2. A possible leak of email addresses held by Shimotsuke City following unauthorised access to arara came to light.
  3. Leaks or possible leaks of email addresses held by Kewpie, Mutsu City, Maker’s Shirt Kamakura, Ashikaga City, Nasushiobara City and Fujiya came to light.
  4. Leaks of email addresses held by MS&AD group companies, Royal Hotel, Kakogawa City and the Yomiuri Giants came to light.

Original incident

This is spillover from the Arara incident.

  • Data breachAraraKnock-on victims: 25

    Arara email service cyber-attack exposes 81.33 million email addresses

    81.3mImpact: 81,329,467 email addresses and some customers' member information

    Japan's Arara Message email delivery service was breached through a web server vulnerability, exposing email addresses and some customers' member information. Further investigation put the number of unique email addresses exposed at 81,329,467. The attacker also misused the service to send up to approximately 7.13 million emails impersonating credit card companies, and the company isolated the servers and suspended its email delivery service entirely.

    Related reports: 20 · last report →

12 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.